CVE-2018-18441-exploit

CVE-2018-18441-exploit D-Link DCS series Wi-Fi cameras expose sensitive information regarding the device configuration. The affected devices include many of DCS series, such as: DCS-936L, DCS-942L, DCS-8000LH, DCS-942LB1, DCS-5222L, DCS-825L, DCS-2630L, DCS-820L, DCS-855L, DCS-2121, DCS-5222LB1,...

CVE-2020-25078

D-Link DCS Series Account Password Information Disclosure Vulnerability D-Link DCS Series account password information disclosure vulnerability, obtain account password via script to log in. Vulnerability ID CVE-2020-25078 Tool Usage python3 CVE-2020-25078.py -u http://127.0.0.1:1111 single URL...

EUVD-2026-106879

A vulnerability was determined in D-Link DCS-6501LH 3.03.02. Affected by this vulnerability is the function mydlinksetrootpwd of the file /mnt/mtd/aoniipc. Executing a manipulation can lead to use of weak credentials. The attack may be launched remotely. The attack requires a high level of...

CVE-2026-113735

A vulnerability was determined in D-Link DCS-6501LH 3.03.02. Affected by this vulnerability is the function mydlinksetrootpwd of the file /mnt/mtd/aoniipc. Executing a manipulation can lead to use of weak credentials. The attack may be launched remotely. The attack requires a high level of...

CVE-2026-113735 D-Link DCS-6501LH aoni_ipc mydlink_set_root_pwd weak credentials

A vulnerability was determined in D-Link DCS-6501LH 3.03.02. Affected by this vulnerability is the function mydlinksetrootpwd of the file /mnt/mtd/aoniipc. Executing a manipulation can lead to use of weak credentials. The attack may be launched remotely. The attack requires a high level of...

CVE-2026-113735

The D-Link DCS-6501LH (firmware version 3.03.02 ) is vulnerable to a weak credentials issue (CWE-1391) within the mydlink_set_root_pwd function of the /mnt/mtd/aoni_ipc file. An attacker could potentially launch a remote attack with high complexity to exploit this flaw, although the exploitation ...

mpfddecode function in the Data Compromise

The vulnerability of the mpfddecode function in the bootloaderregion.bin file of the Emergency HTTP Recovery Server component of the D-Link DCS-930L Wi-Fi camera software is related to insufficient data authentication checks. Exploiting this vulnerability could allow an attacker to compromise the...

CVE-2026-108971

A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfddecode of the file bootloaderregion.bin of the component Emergency HTTP Recovery Server. Executing a manipulation of the argument firmware can lead to improper verification of cryptographic signature. The attack may b...

CVE-2026-108971

A flaw exists in the D-Link DCS-930L (firmware version B1.08B4 ) within the Emergency HTTP Recovery Server component. Specifically, the mpfd_decode function of the bootloader_region.bin file fails to properly verify cryptographic signatures when the firmware argument is manipulated. This vulnerab...

CVE-2026-108971 D-Link DCS-930L Emergency HTTP Recovery Server bootloader_region.bin mpfd_decode signature verification

A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfddecode of the file bootloaderregion.bin of the component Emergency HTTP Recovery Server. Executing a manipulation of the argument firmware can lead to improper verification of cryptographic signature. The attack may b...

EUVD-2026-98294

A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfddecode of the file bootloaderregion.bin of the component Emergency HTTP Recovery Server. Executing a manipulation of the argument firmware can lead to improper verification of cryptographic signature. The attack may b...

CVE-2026-108971: Improper Verification of Cryptographic Signature

A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfddecode of the file bootloaderregion.bin of the component Emergency HTTP Recovery Server. Executing a manipulation of the argument firmware can lead to improper verification of cryptographic signature. The attack may b...

DCS932L-Emulation-CVE-2024-37606-Attack

エミュレーションを再び簡単に ようこそ！このリポジトリは、D-Link DCS-932L ファームウェアをエミュレートし、CVE-2024-37606 の脆弱性を実証するためのツールと環境を提供します。パッチ適用済みのバイナリと必要なライブラリが含まれており、Ghidra などのツールを使った手動パッチ適用を必要とせず、エミュレーションのセットアップを簡略化します。 CVE-2024-37606 このプロジェクトには、CVE-2024-37606 の概念実証エクスプロイト CVE-2024-37606-DCS932L.py が含まれています。この脆弱性は、alphapd...

PT-2026-110355

Name of the Vulnerable Software and Affected Versions D-Link DCS-930L version B1.08B4 Description A flaw in the Emergency HTTP Recovery Server component allows remote attackers to bypass cryptographic signature verification. This occurs through the manipulation of the firmware argument within the...

D-Link DCS-932L Subroutine Arbitrary Command Execution

The vulnerability of the sub42EF14 function /bin/alphapd of the D-Link DCS-932L microprogrammed surveillance camera is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

D-Link DCS-930L Auth RCE

Module exploits D-Link DCS-930L Remote Code Execution vulnerability which allows executing command on the device. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DCS-930L Auth RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.exploit.handler import...

D-Link DCS Cameras Authentication Bypass

D-Link DCS web cameras allow unauthenticated attackers to obtain the configuration of the device remotely. A copy of the device configuration can be obtained by accessing unprocteted URL. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DCS Cameras Authentication Bypass""" import re from...

D-Link DCS - Unauth Credential Dump (CVE-2020-25078)

Dumps camera credentials from /config/getuser?index=0 CVE-2020-25078. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DCS unauthenticated credential dump via /config/getuser CVE-2020-25078.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleAuxiliary,...

D-Link DCS - Unauth Credential Disclosure Detection (CVE-2020-25078)

Detects CVE-2020-25078 by requesting /config/getuser?index=0 and looking for name=/pass= credential lines without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DCS IP camera credential disclosure via /config/getuser CVE-2020-25078.""" import re from kittysploit import from...

CVE-2026-13545

A vulnerability has been found in D-Link DCS-935L 1.10.01. This affects the function sub400E40 of the file setconf.cgi of the component POST Parameter Handler. Such manipulation of the argument UID leads to os command injection. The attack can be launched remotely. The exploit has been disclosed ...